From be5da2d7e3a22904f93b56ab54df06d975588d8e Mon Sep 17 00:00:00 2001 From: Alex Stapleton Date: Fri, 7 Feb 2014 08:15:39 +0000 Subject: Add warning about untrusted private keys --- docs/hazmat/primitives/rsa.rst | 7 +++++++ 1 file changed, 7 insertions(+) diff --git a/docs/hazmat/primitives/rsa.rst b/docs/hazmat/primitives/rsa.rst index 3c509cf9..d62aa101 100644 --- a/docs/hazmat/primitives/rsa.rst +++ b/docs/hazmat/primitives/rsa.rst @@ -16,6 +16,13 @@ RSA Normally you do not need to directly construct private keys because you'll be loading them from a file or generating them automatically. + .. warning:: + This method only checks a limited set of properties of its arguments. + Using an RSA that you do not trust or with incorrect parameters may + lead to insecure operation, crashes, and other undefined behavior. We + recommend that you only ever load private keys that were generated with + software you trust. + This class conforms to the :class:`~cryptography.hazmat.primitives.interfaces.RSAPrivateKey` interface. -- cgit v1.2.3